$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a7178c48-59b6-3a0d-897e-12d38f4c8ee2.roa File: a7178c48-59b6-3a0d-897e-12d38f4c8ee2.roa (raw, json) Hash identifier: jBcWamX2spsPvQB8ZTy2D7tM0l8b5/tsntlDWubdTuU= Subject key identifier: 3F:D3:1F:5D:C7:F5:09:89:28:26:E7:FF:38:C5:9F:A1:15:0A:22:71 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E112F2E81AC2ED3CE3DDC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a7178c48-59b6-3a0d-897e-12d38f4c8ee2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:12:f2:e8:1a:c2:ed:3c:e3:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3459165c-7e4f-47a2-8b79-2b73985f763e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:f5:5a:40:0c:70:af:3a:a5:47:01:df:c4: 83:e1:0e:2e:db:05:49:2b:d6:d0:14:a1:19:6f:2c: c5:bc:08:05:27:d5:68:d1:7b:d7:2a:6c:42:72:59: 0a:1d:d8:5e:6e:b5:b0:e1:ab:d5:ad:9e:53:0b:0b: 63:a1:36:67:f5:68:19:36:80:85:7f:fb:60:30:32: ee:36:3c:ea:68:04:59:a4:21:21:e4:2e:0d:3f:57: e7:39:f8:3b:91:c3:87:83:05:78:f3:b2:22:86:7a: 41:9d:98:1f:be:6a:d4:60:25:23:83:e3:fe:6d:bf: a3:f3:3b:ad:b5:ac:ee:41:52:6b:d6:c5:f6:a8:4f: 54:67:e8:f7:d3:2c:8d:f5:52:92:e5:2c:1b:88:24: 27:c8:de:40:69:68:d0:89:bb:a4:a7:f4:e2:55:2d: 03:b3:d6:0e:2f:b4:96:aa:04:3e:4e:5a:a8:a6:2d: fa:f5:9d:48:ae:67:b7:c5:41:b1:93:74:35:ff:1c: 3c:2f:88:8c:40:e4:ad:2f:4a:b5:8f:d9:8d:28:95: e8:1c:46:37:c1:60:6a:89:6f:7f:34:07:53:2b:63: 04:56:98:98:dc:6d:3a:68:e0:43:71:5e:28:20:d9: 4f:e8:1e:ab:6c:6c:c0:55:93:0b:a4:53:ab:1a:ca: 10:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D3:1F:5D:C7:F5:09:89:28:26:E7:FF:38:C5:9F:A1:15:0A:22:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a7178c48-59b6-3a0d-897e-12d38f4c8ee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:77:6f:a7:fd:e8:07:fe:4b:85:e9:85:4c:77:73:bd:f1:48: 8f:e4:bf:e0:70:f4:40:0d:4d:8e:92:c9:30:a4:fd:d2:96:3e: 3c:ec:33:b0:c1:79:1c:6e:28:ca:61:0b:72:db:e8:53:10:b1: 8c:43:86:78:c7:1b:9c:39:d0:c4:5c:0c:6d:08:3c:9c:d7:eb: 71:87:77:8f:2d:43:20:55:d5:fa:55:96:38:b7:37:1f:9f:7e: 69:dc:77:7b:8a:d3:2c:cb:f0:be:e0:0c:fc:be:33:d9:98:4c: cd:06:4a:f9:0f:ef:5e:ef:6b:02:8a:6c:2e:e1:11:f8:2a:42: 93:b7:01:11:60:4f:54:6e:14:9b:ac:d6:4b:f7:c9:a2:d6:16: 06:05:09:e9:85:bc:08:79:ef:28:7a:a7:15:a5:72:72:ed:2f: 89:67:54:38:4c:d6:73:f0:f7:1d:07:eb:36:33:68:ce:c6:c4: 50:6c:4c:4f:07:2f:7d:7e:83:4f:97:f5:f5:df:83:a0:b1:5d: 1b:a8:47:58:14:ca:ad:85:75:10:37:c6:52:36:5d:35:5e:28: f9:25:83:86:9f:fa:01:95:dc:49:54:aa:55:6b:57:ef:5b:13: b5:af:a0:1f:27:8e:8a:b9:38:30:ea:be:b5:7d:0a:80:d4:cd: eb:ea:b3:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4RLy6BrC7Tzj3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzQ1OTE2NWMtN2U0Zi00N2EyLThiNzktMmI3Mzk4NWY3NjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZX1WkAMcK86pUcB38SD4Q4u2wVJK9bQFKEZ byzFvAgFJ9Vo0XvXKmxCclkKHdhebrWw4avVrZ5TCwtjoTZn9WgZNoCFf/tgMDLu NjzqaARZpCEh5C4NP1fnOfg7kcOHgwV487IihnpBnZgfvmrUYCUjg+P+bb+j8zut tazuQVJr1sX2qE9UZ+j30yyN9VKS5SwbiCQnyN5AaWjQibukp/TiVS0Ds9YOL7SW qgQ+Tlqopi369Z1Irme3xUGxk3Q1/xw8L4iMQOStL0q1j9mNKJXoHEY3wWBqiW9/ NAdTK2MEVpiY3G06aOBDcV4oINlP6B6rbGzAVZMLpFOrGsoQhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD/TH13H9QmJKCbn/zjFn6EVCiJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTcxNzhjNDgtNTliNi0z YTBkLTg5N2UtMTJkMzhmNGM4ZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG13b6f96Af+S4XphUx3c73xSI/kv+Bw9EANTY6SyTCk/dKWPjzs M7DBeRxuKMphC3Lb6FMQsYxDhnjHG5w50MRcDG0IPJzX63GHd48tQyBV1fpVlji3 Nx+ffmncd3uK0yzL8L7gDPy+M9mYTM0GSvkP717vawKKbC7hEfgqQpO3ARFgT1Ru FJus1kv3yaLWFgYFCemFvAh57yh6pxWlcnLtL4lnVDhM1nPw9x0H6zYzaM7GxFBs TE8HL31+g0+X9fXfg6CxXRuoR1gUyq2FdRA3xlI2XTVeKPklg4af+gGV3ElUqlVr V+9bE7WvoB8njoq5ODDqvrV9CoDUzevqs9A= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:53 2026 by rpki-client